enrichment

May 23, 2024

Changes in this version

+ type SensitiveValueRedactor struct

+ func NewSensitiveValueRedactor(sensitiveValueRegex *regexp.Regexp) *SensitiveValueRedactor

+ func (r *SensitiveValueRedactor) Enrich(ctx context.Context, req *EnrichRequest)

+ func (r *SensitiveValueRedactor) EventTypes() []castpb.EventType

May 15, 2024

Changes in this version

type EnrichRequest

+ EbpfEvent *types.Event

Mar 21, 2024

Changes in this version

+ var ErrCannotGetInode = errors.New("cannot get inode for path")

+ var ErrFileDoesNotExist = errors.New("wanted file does not exist")

+ var ErrProcFolderDoesNotExist = errors.New("/proc/<pid> folder does not exist")

+ type Config struct

+ EventEnrichers []EventEnricher

+ WorkerCount int

+ type ContainerForCgroupGetter func(cgroup uint64) (*containers.Container, bool, error)

+ type EnrichRequest struct

+ Args types.Args

+ Container *containers.Container

+ Event *castpb.Event

+ EventContext *types.EventContext

+ type EventEnricher interface

+ Enrich func(context.Context, *EnrichRequest)

+ EventTypes func() []castpb.EventType

+ func EnrichWithFileHash(log *logging.Logger, mountNamespacePIDStore *types.PIDsPerNamespace, ...) EventEnricher

+ type PIDsInNamespaceGetter func(ns uint32) []uint32

+ type Service struct

+ func NewService(log *logging.Logger, cfg Config) *Service

+ func (s *Service) Enqueue(e *EnrichRequest) bool

+ func (s *Service) Events() chan *castpb.Event

+ func (s *Service) Run(ctx context.Context) error